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Amendments to the Claims ; 

This listing of the claims replaces all prior versions 
and listing of the claims in the present application. 
Listing of Claims: 

1-9. (canceled) 

10. (currently amended) A method for executing on a 
computer a security critical activity having at least one action, 
the security critical activity being initiated by a user of the 
computer and executed by a security device connected to [ [a] ] the 
computer with uocr involvement , the method comprising the steps 
of: 

the user of the computer defining in a proxy letter a 
situation in which the proxy letter is allowed to handle [[a]] 
the security critical activity; 

starting execution of an action of [ [a] ] the security 
critical activity in a present situation; 

determining, for the started action and the present 
situation and based on the proxy letter, whether (a) the proxy 
letter is allowed to handle the started action without direct 
user involvement or (b) direct the user involvement is required 
to handle the started action; 

when the started action is handled by the proxy letter 
or by direct the user involvement , completing the started action 
and repeating the starting execution and determining steps for 
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each action in the security critical activity until each action 
in the security critical activity has been completed; and 

when started action is handled neither by the proxy 
letter nor by direct the user involvement , stopping execution of 
the security critical activity. 

11. (previously presented) The method of claim 10, 
wherein the defining step includes the step of defining in the 
proxy letter situations in which the proxy letter is allowed to 
grant an action. 

12. (previously presented) The method of claim 10, 
wherein the defining step includes the step of defining in the 
proxy letter situations in which the proxy letter is allowed to 
prevent an action from being executed. 

13. (previously presented) The method of claim 12, 
further comprising the steps of determining whether the proxy 
letter is allowed to prevent an action from being executed and 
stopping execution of the action when the action is one the proxy 
letter is allowed to prevent from being executed. 

14. (previously presented) The method of claim 10, 
wherein the determining step includes the steps of reading the 
proxy letter and requesting direct user involvement if the proxy 
letter is not allowed to handle the started action. 

15. (previously presented) The method of claim 14, 
following the step of requesting direct user involvement, further 
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comprising the steps of waiting a predetermined period of time 
and, when direct user involvement has not occurred within the 
predetermined period of time, stopping execution of the security 
critical activity. 

16. (currently amended) The method of claim 10, wherein 
the step of completing the started action comprises the step of 
logging whether the proxy letter or direct the user involvement 
handled the action. 

17. (new) The method of claim 10, wherein the security 
critical activity includes a money transaction and wherein the 
defining step provides that the proxy letter is allowed to handle 
the started action without direct user involvement when an amount 
of money in the transaction does not exceed a predetermined 
amount and that the user is required to handle the started action 
when the amount of money in the transaction exceeds the 
predetermined amount . 

18. (new) A method for executing on a computer a 
security critical activity having at least one action, the 
security critical activity being initiated by a user of the 
computer and executed by a security device connected to the 
computer, the method comprising the steps of: 

operating the computer in a secure management mode in 
which permission of the user of the computer is required before 
performing each action of the security critical activity; 
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the user of the computer defining in the computer a 
first group of situations and a second group of situations, the 
first group being situations in which the user's permission to 
perform each action in the security critical activity is granted 
automatically without further involvement of the user, and the 
second group being situations in which the user's permission to 
perform each action in the security critical activity is not 
granted automatically and must be obtained prior to performing 
each action of the security critical activity; 

when performing the security critical activity, 
determining which one of the first and second groups of 
situations is applicable; 

completing the security critical activity by performing 
each action when the first group of situations is applicable, and 
completing the security critical activity by performing each 
action when the second group of situations is applicable and the 
user of the computer grants permission for each action to be 
performed ; and 

not completing the security critical activity when the 
second group of situations is applicable and the user of the 
computer does not grant permission for an action of the security 
critical activity to be performed. 

19. (new) The method of claim 18, wherein the security 
critical activity includes a money transaction and wherein the 
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first group of situations includes money transactions that do not 
exceed a predetermined amount of money and the second group of 
situations includes money transactions that exceed the 
predetermined amount of money. 
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